Description
Position: Senior Security Consultant
Job role description:
As a member of the Security Governance department, the Security Consultant assists the team on making sure the policy framework is aligned with threat landscape, business transformation, technology capabilities and organisational structure.
This role is Brussels based and is a 6 month contract with expected extensions.
The candidate will become accountable for specific-scoped assignments and must be able to:
Identify and prepare amendments to the policy framework by:
Writing functional security requirements in collaboration with the CSIRT team which provide a sufficient protection for resources based on Attack VectorVerify making sure those function security requirements can be met using available technology
Assist the Enterprise Security Architecture team in mapping security requirements to IT Architecture Building Block used by IT to create High-Level Design
Assist the Enterprise Security Architecture team in defining Security Requirements for Security Solution Building Block
Assist IT in identifying and providing remediation to possible compliance issues
Develop High Level Security Requirements to translate to leadership team (Director-level) detail security requirements for them to understand the security impact on their business
Work with both the CSIRT & Enterprise Security Architecture teams to maintain Attack Vector on Architecture Building Block updated
Specific technology & governance skills:
You understand the following ISMS standards & frameworks: ISO 27001, ISO 62443, SANS CSC20 & OWASP
You have a basic understanding of networking technologies: routing & switching standards, Access control (WPA, 802.1x, advanced Firewalling techniques, IDS, endpoint Firewalls...), traffic analysis techniques (Sniffing, Netflow...), VPN (IPSec, MPLS) standards
You are familiar with IT and security infrastructure standards: Directory technologies, federation & AAA (OAuth2, Radius...), logging standard (syslog, Windows Event Log...), APIs & related gateway web technologies (REST, API gateway...), unstructured data encryption (RMS), O/S (mobile & server) & related management systems (MDM, MAM...)
Languages:
Fluency in English language in addition to your mother language - both verbal and written, with the ability to communicate clearly